製品・ソフトウェアに関する情報

JVN脆弱性詳細

Dotclear の updateFile 関数における任意の PHP コードを実行される脆弱性

Title	Dotclear の updateFile 関数における任意の PHP コードを実行される脆弱性
Summary	Dotclear の Media Manager の inc/core/class.dc.media.php の updateFile 関数は、パス名を制限しないため、任意の PHP コードを実行される脆弱性が存在します。
Possible impacts	リモート認証されたユーザにより、media_path または media_file パラメータを介して、任意の PHP コードを実行される可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	June 8, 2011, midnight
Registration Date	March 27, 2012, 6:43 p.m.
Last Update	March 27, 2012, 6:43 p.m.

Affected System

Dotclear

Dotclear 2.2.3 未満

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2011-1584	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1584
National Vulnerability Database (NVD)
2	CVE-2011-1584	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-1584

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-264	https://jvndb.jvn.jp/ja/cwe/CWE-264.html

ベンダー情報

No	Name	URL
Dotclear
1	Changeset 2:4f1756320ee0	http://dev.dotclear.org/2.0/changeset/2:3427
2	Dotclear 2.2.3	http://dotclear.org/blog/post/2011/04/01/Dotclear-2.2.3
3	Dotclear 2.2.3	http://fr.dotclear.org/blog/post/2011/04/01/Dotclear-2.2.3

Change Log

No	Changed Details	Date of change
0	[2012年03月27日] 掲載	Feb. 17, 2018, 10:37 a.m.

NVD Vulnerability Information

CVE-2011-1584

Summary	The updateFile function in inc/core/class.dc.media.php in the Media Manager in Dotclear before 2.2.3 does not properly restrict pathnames, which allows remote authenticated users to upload and execute arbitrary PHP code via the media_path or media_file parameter. NOTE: some of these details are obtained from third party information.
Publication Date	June 8, 2011, 7:36 p.m.
Registration Date	Jan. 28, 2021, 4:38 p.m.
Last Update	Nov. 21, 2024, 10:26 a.m.

Affected software configurations

Related information, measures and tools

No	URL	タグ
1	http://dev.dotclear.org/2.0/changeset/2:3427	Exploit Patch
2	http://dotclear.org/blog/post/2011/04/01/Dotclear-2.2.3	Patch Vendor Advisory
3	http://fr.dotclear.org/blog/post/2011/04/01/Dotclear-2.2.3	Vendor Advisory
4	http://openwall.com/lists/oss-security/2011/04/13/19
5	http://openwall.com/lists/oss-security/2011/04/14/8
6	http://openwall.com/lists/oss-security/2011/04/15/11
7	http://openwall.com/lists/oss-security/2011/04/15/7
8	http://secunia.com/advisories/44049	Vendor Advisory
9	http://www.arcabit.com/english/home/a-flaw-in-dotclear
10	http://dev.dotclear.org/2.0/changeset/2:3427	Exploit Patch
11	http://www.arcabit.com/english/home/a-flaw-in-dotclear
12	http://secunia.com/advisories/44049	Vendor Advisory
13	http://openwall.com/lists/oss-security/2011/04/15/7
14	http://openwall.com/lists/oss-security/2011/04/15/11
15	http://openwall.com/lists/oss-security/2011/04/14/8
16	http://openwall.com/lists/oss-security/2011/04/13/19
17	http://fr.dotclear.org/blog/post/2011/04/01/Dotclear-2.2.3	Vendor Advisory
18	http://dotclear.org/blog/post/2011/04/01/Dotclear-2.2.3	Patch Vendor Advisory

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-264	認可・権限・アクセス制御	https://cwe.mitre.org/data/definitions/264.html